Privacy Policy

1. Information we collect

Account: name, email, password (hashed by our auth provider), and optional sign-in with a connected provider. We do not create an account for a student under 13.

Student age: asked first so we can enforce a minimum age of 13. We then store only an age band (13–14, 15–16, 17–18, or 19+) and delete the exact number. Age is not used to rank schools.

Student workspace: student name, GPA, SAT, extracurriculars, leadership, campus preferences, selected states, locked colleges, home city and state, and visit-route settings — only after the student is 13 or older.

Billing: email and payment status from Stripe if you buy a Family Season Pass. We do not receive your full card number.

Technical: browser type, basic device data, and cookies or local storage needed to keep you signed in and save a guest list.

2. How we use it

To match colleges, filter by your preferences, build a visit route, and save your list across devices.

To create and secure your account, process payment, and send transactional email (receipts, password reset).

To improve the product (for example, which filters people use) using aggregated, de-identified data.

We do not sell student lists to colleges, lenders, or advertisers. We do not use student GPA, SAT, or other academics for advertising.

3. How we share it

Processors who run the Service for us: hosting (Vercel), database (Neon), authentication, and payments (Stripe). They may only use data to provide their service to us.

If required by law, court order, or to prevent harm.

If we transfer the business, your data would move with it under this Policy or a successor policy with notice.

We do not share a student’s profile with colleges unless you choose a feature that does so — none exists today.

4. Students and families

The Service is built for high school students and parents. The student this list is for must be 13 or older. If a student is under 18, a parent or guardian should create or supervise the account.

A Family Season Pass covers one household. That household may run multiple scenarios for multiple children on the same account, each 13 or older.

We do not make accounts, save transcripts, take payment, or keep an email for students under 13. A parent-contact field is not offered today; we will not add one except as part of a full COPPA consent flow that counsel has approved.

If we learn that a current user is under 13, we delete that workspace as soon as we learn — always within 72 hours — unless counsel has approved a full COPPA consent flow. None exists today.

A parent may request access, correction, or deletion of a minor’s account by emailing us from the address on the account.

5. Retention and security

Guest lists live in the browser until you clear site data. Signed-in workspaces stay until you delete the account or we close the Service.

We use HTTPS, hashed passwords, and access-controlled databases. No method of transmission is 100% secure.

You may email us to export or delete your workspace. We will honor deletion except where we must keep records (for example, a paid invoice).

6. Cookies

We use essential cookies or storage for sign-in and to remember a guest list. We do not run third-party advertising cookies.

You can block cookies in your browser; sign-in and saved lists may stop working.

7. Your rights

Depending on where you live (including some U.S. states), you may have the right to access, correct, delete, or export personal data, or to opt out of certain sharing.

Email privacy@lovemonkey.app. We will not discriminate against you for exercising privacy rights.

8. International users

The Service is operated from the United States. If you use it from another country, you understand your data is processed in the U.S.

9. Changes

We will post updates on this page with a new date. If we make a material change to how we use student data, we will provide additional notice when required.

10. Contact

Privacy questions: privacy@lovemonkey.app. Operator: Love Monkey Enterprises LLC.